Overview

overview

8

Static

static

936da9440a...a2.exe

windows7-x64

1

936da9440a...a2.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    936da9440a5c092acdead3b3992e96526cd47d811606f644b57d801cf45e1ca2

  • Size

    54KB

  • Sample

    221203-p3bq5sfa5t

  • MD5

    3118dc2ccf2c79e35e6077b530045f2a

  • SHA1

    e6e5ab9c8794b297aa8ee926eb00cdbbe8e088a3

  • SHA256

    936da9440a5c092acdead3b3992e96526cd47d811606f644b57d801cf45e1ca2

  • SHA512

    982571cc8380bef756c51ad42fb547d62e4f1ec3072824b4c6a50b7446472f9a2c2af571d53f6ff20b64f663e2a209e74e454784f5f21ff408617cf029a338e2

  • SSDEEP

    1536:drz9IyO+m2Z18WDMkdk/8M+oEAldgG7NmyzPSeX:xrm2ZKSdK8M+oz/TBX

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      936da9440a5c092acdead3b3992e96526cd47d811606f644b57d801cf45e1ca2

    • Size

      54KB

    • MD5

      3118dc2ccf2c79e35e6077b530045f2a

    • SHA1

      e6e5ab9c8794b297aa8ee926eb00cdbbe8e088a3

    • SHA256

      936da9440a5c092acdead3b3992e96526cd47d811606f644b57d801cf45e1ca2

    • SHA512

      982571cc8380bef756c51ad42fb547d62e4f1ec3072824b4c6a50b7446472f9a2c2af571d53f6ff20b64f663e2a209e74e454784f5f21ff408617cf029a338e2

    • SSDEEP

      1536:drz9IyO+m2Z18WDMkdk/8M+oEAldgG7NmyzPSeX:xrm2ZKSdK8M+oz/TBX

    Score
    8/10
    evasionpersistence

    • Executes dropped EXE

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks